@cmssy/next 4.7.2 → 5.0.1

package/dist/index.d.cts

@@ -1,330 +1,6 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ComponentType, ReactNode } from 'react';
-import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig } from '@cmssy/react';
-export { DEFAULT_CMSSY_API_URL, FieldCondition, FieldConditionGroup, FieldConditionLogic, evaluateFieldConditionGroup, resolveApiUrl } from '@cmssy/react';
-import { EditBridgeConfig } from '@cmssy/react/client';
-import { C as CmssyNextConfig } from './config-DNaPqq1f.cjs';
-export { a as CmssyEnvConfig, D as DEFAULT_CMSSY_EDITOR_ORIGINS, b as assertAuthConfig, d as defineCmssyConfig, r as resolveEditorOrigin } from './config-DNaPqq1f.cjs';
-import { NextRequest, NextResponse } from 'next/server';
-import { MetadataRoute, Metadata } from 'next';
-import { CmssySessionPayload, SessionCookieOptions, CmssySessionUser, FetchProductOptions, CmssyProduct, FetchProductsOptions, CmssyProductPage, FetchOrderByTokenOptions, CmssyOrder, VerifyCmssyWebhookOptions, CmssyWebhookEvent } from '@cmssy/types';
-export { CmssyAuthConfig, CmssyProductPage, CmssySessionPayload, CmssySessionUser, CmssyStockState, CmssyWebhookEvent, CmssyWebhookOrder, FetchOrderByTokenOptions, FetchProductOptions, FetchProductsOptions, MyOrdersResult, SessionCookieOptions, VerifyCmssyWebhookOptions } from '@cmssy/types';
-
-interface CmssyEditorProps {
-    page: CmssyPageData;
-    locale: string;
-    defaultLocale: string;
-    enabledLocales?: string[];
-    edit: EditBridgeConfig;
-    forms?: Record<string, CmssyFormDefinition>;
-}
-interface CreateCmssyPageOptions {
-    editor?: ComponentType<CmssyEditorProps>;
-    path?: string;
-}
-interface CatchAllParams {
-    path?: string[];
-}
-type SearchParams = Record<string, string | string[] | undefined>;
-interface CatchAllProps {
-    params?: Promise<CatchAllParams>;
-    searchParams?: Promise<SearchParams>;
-}
-/**
- * Public catch-all page. Statically renderable: it never reads
- * `searchParams` or `headers()` - awaiting either forces every route
- * dynamic and kills ISR (CMS-952). Draft-mode preview (the authenticated
- * /api/draft cookie) still works per-request via `draftMode()`, which is
- * static-safe, and renders draft CONTENT without the editor (CMS-948).
- * The editor-iframe flow (`?cmssyEdit=1&cmssySecret=...`) is served by
- * the middleware rewrite (`cmssyEditRewrite`) onto the dynamic edit route
- * mounted with `createCmssyEditPage`.
- */
-declare function createCmssyPage(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyPageOptions): ({ params, searchParams, }: CatchAllProps) => Promise<react_jsx_runtime.JSX.Element>;
-/**
- * Editor page for the middleware-rewritten edit route
- * (`app/cmssy-edit/[[...path]]/page.tsx`, `dynamic = "force-dynamic"`).
- * Re-verifies the `cmssyEdit` + `cmssySecret` pair itself, so a direct hit
- * on the route path (bypassing the middleware) cannot mount the editor.
- */
-declare function createCmssyEditPage(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyPageOptions): ({ params, searchParams, }: CatchAllProps) => Promise<react_jsx_runtime.JSX.Element>;
-
-/**
- * Where the middleware rewrites editor-preview traffic. Mount the matching
- * dynamic route in the consumer app:
- *
- *   app/cmssy-edit/[[...path]]/page.tsx
- *     export const dynamic = "force-dynamic";
- *     export default createCmssyEditPage(cmssy, blocks, { editor: Editor });
- */
-declare const CMSSY_EDIT_PATH_PREFIX = "/cmssy-edit";
-/**
- * Rewrite VERIFIED editor requests (`cmssyEdit=1` + a `cmssySecret` matching
- * the site's draft secret, CMS-948) onto the dedicated dynamic edit route, so
- * the public catch-all can stay fully static. A static page never sees its
- * query string - this rewrite is what makes the editor iframe work at all
- * once ISR is on. Draft-mode preview (the authenticated /api/draft cookie) is
- * NOT rewritten: it renders draft content on the public route via
- * `draftMode()`, without the editor. Returns null for normal traffic so it
- * composes with other middleware.
- */
-declare function cmssyEditRewrite(request: NextRequest, config: {
-    draftSecret: string;
-}, options?: {
-    /**
-     * Headers to forward to the edit route, for a site whose middleware tells
-     * the app something the path alone does not - a resolved locale, say.
-     * Without them the editor preview renders in the default language while the
-     * public page renders in the visitor's.
-     */
-    requestHeaders?: Headers;
-}): Promise<NextResponse | null>;
-/** Standalone middleware when the consumer has no other middleware to compose. */
-declare function createCmssyEditMiddleware(config: {
-    draftSecret: string;
-}): (request: NextRequest) => Promise<NextResponse>;
-
-interface CreateCmssyNotFoundOptions {
-    /**
-     * Rendered when no 404 page is configured in Settings, or the configured
-     * page has no published content. Defaults to a minimal built-in message.
-     */
-    fallback?: ReactNode;
-}
-/**
- * Renders the workspace's configured 404 page (Settings → 404 page) as the
- * body of Next's `app/not-found.tsx`, preserving the HTTP 404 status. Drop the
- * returned component in as the default export of `app/not-found.tsx`:
- *
- *   export default createCmssyNotFound(cmssy, blocks);
- */
-declare function createCmssyNotFound(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyNotFoundOptions): () => Promise<string | number | bigint | boolean | react_jsx_runtime.JSX.Element | Iterable<ReactNode> | null | undefined>;
-
-interface SeoBaseUrlOption {
-    /**
-     * Override for the canonical origin. A string (e.g. https://cmssy.com) or a
-     * resolver. Falls back to `config.siteUrl`, then the request `host` header.
-     */
-    baseUrl?: string | (() => string | Promise<string>);
-}
-
-interface CreateCmssyRobotsOptions extends SeoBaseUrlOption {
-    /** Path prefixes to disallow. Defaults to `["/api/"]`. */
-    disallow?: string[];
-    /** Override the generated rules entirely. */
-    rules?: MetadataRoute.Robots["rules"];
-    /** Reference `${baseUrl}/sitemap.xml`. Defaults to true. */
-    sitemap?: boolean;
-    /**
-     * Emit the non-standard `Host:` directive (a Yandex extension). Google
-     * ignores it and reports a warning in Search Console, so it is off by
-     * default. Enable only when targeting Yandex.
-     */
-    host?: boolean;
-}
-/**
- * Builds the default export for Next's `app/robots.ts`. Allows crawling and
- * points to the sitemap. Drop in as:
- *
- *   export default createCmssyRobots(cmssy);
- */
-declare function createCmssyRobots(config: CmssyNextConfig, options?: CreateCmssyRobotsOptions): () => Promise<MetadataRoute.Robots>;
-
-/** What an `extra` resolver needs to build URLs that agree with the page ones. */
-interface CmssySitemapContext {
-    baseUrl: string;
-    defaultLocale: string;
-    locales: string[];
-}
-interface CreateCmssySitemapOptions extends SeoBaseUrlOption {
-    /**
-     * Entries appended to the generated page list - the URLs a workspace's PAGES
-     * cannot express, like a product or a category rendered from model records.
-     * Pass a resolver to build them at request time; it gets the same baseUrl and
-     * locales the page entries use, so the two cannot disagree.
-     */
-    extra?: MetadataRoute.Sitemap | ((context: CmssySitemapContext) => MetadataRoute.Sitemap | Promise<MetadataRoute.Sitemap>);
-    /**
-     * Additional page slugs to omit. The workspace's configured 404 page
-     * (Settings → 404 page) is excluded automatically via its id, so this is
-     * only for extra slugs you never want indexed.
-     */
-    excludeSlugs?: string[];
-}
-/**
- * Builds the default export for Next's `app/sitemap.ts` from the workspace's
- * published pages. Emits one entry per page with per-locale `alternates` when
- * the config enables multiple locales. Drop in as:
- *
- *   export default createCmssySitemap(cmssy);
- */
-declare function createCmssySitemap(config: CmssyNextConfig, options?: CreateCmssySitemapOptions): () => Promise<MetadataRoute.Sitemap>;
-
-interface BuildCmssyMetadataOptions extends SeoBaseUrlOption {
-    /** Override the Open Graph / Twitter image (defaults to workspace branding). */
-    image?: string;
-    /** Open Graph type. Defaults to "website". */
-    ogType?: string;
-    /** Twitter card. Defaults to "summary_large_image" when an image exists. */
-    twitterCard?: "summary" | "summary_large_image";
-    /**
-     * The language to render metadata in. Only needed when the language does not
-     * live in the URL (a per-domain or cookie strategy); with a locale prefix the
-     * path already says it.
-     */
-    locale?: string;
-}
-/**
- * Builds complete Next.js `Metadata` for a cmssy page from its SEO fields and
- * the workspace branding: title/description/keywords, canonical + per-locale
- * `hreflang` alternates, and Open Graph / Twitter cards (with the branding OG
- * image). Use in a route's `generateMetadata`:
- *
- *   export const generateMetadata = async ({ params }) =>
- *     buildCmssyMetadata(cmssy, (await params).path);
- *
- * Pass the catch-all segments **as routed**, locale prefix and all: the prefix
- * is what says which language this page is. Stripping it first (and leaving the
- * language to `config.resolveLocale`) is how every localized page ends up with
- * the default language's title - and a canonical pointing at the default
- * language's URL, which tells Google the translation is a duplicate.
- */
-declare function buildCmssyMetadata(config: CmssyNextConfig, path?: string | string[], options?: BuildCmssyMetadataOptions): Promise<Metadata>;
-
-type CmssyDraftRouteConfig = Pick<CmssyNextConfig, "draftSecret"> & {
-    defaultRedirect?: string;
-};
-declare function createDraftRoute(config: CmssyDraftRouteConfig): (request: Request) => Promise<Response>;
-
-interface CmssyCspOptions {
-    /** Defaults to the cmssy cloud admin origin when unset. */
-    editorOrigin?: string | string[];
-}
-interface MutableHeaders {
-    headers: {
-        get: (name: string) => string | null;
-        set: (name: string, value: string) => void;
-        delete: (name: string) => void;
-    };
-}
-declare function cmssyCspHeaders(options: CmssyCspOptions): Record<string, string>;
-declare function applyCmssyCsp<T extends MutableHeaders>(response: T, options: CmssyCspOptions): T;
-
-declare const CMSSY_EDIT_HEADER = "x-cmssy-edit";
-declare const CMSSY_EDIT_QUERY_PARAM = "cmssyEdit";
-declare const CMSSY_SECRET_QUERY_PARAM = "cmssySecret";
-interface EditRequestLike {
-    cookies: {
-        has: (name: string) => boolean;
-    };
-    nextUrl: {
-        searchParams: {
-            getAll: (name: string) => string[];
-            get: (name: string) => string | null;
-        };
-    };
-}
-declare function isCmssyEditRequest(request: EditRequestLike, config: {
-    draftSecret: string;
-}): Promise<boolean>;
-declare function isCmssyEditMode(): Promise<boolean>;
-
-declare const CMSSY_LOCALE_HEADER = "x-cmssy-locale";
-declare function localeForPathname(config: CmssyClientConfig, pathname: string): Promise<string>;
-declare function splitCmssyLocale(config: CmssyClientConfig, path: string[] | undefined): Promise<{
-    locale: string;
-    path: string[] | undefined;
-}>;
-/**
- * Resolve the active locale. Pass `options.path` (route params) wherever
- * possible - that path is static-safe. The no-argument form falls back to the
- * `x-cmssy-locale` request header, which reads `headers()` and forces the
- * calling route into dynamic rendering.
- */
-declare function getCmssyLocale(config: CmssyClientConfig, options?: {
-    path?: string | string[];
-}): Promise<string>;
-
-/**
- * Resolves the active locale from a pathname's leading segment. Uses the
- * config's static `defaultLocale` + `enabledLocales` when both are set (no
- * network); otherwise fetches the workspace locales (cached).
- */
-declare function resolveLocaleFromPathname(config: CmssyNextConfig, pathname: string): Promise<string>;
-/**
- * Middleware that derives the locale from the URL path prefix and forwards it as
- * the `x-cmssy-locale` request header, so server components that can't read the
- * path (root layout) resolve the right locale via `getCmssyLocale`.
- */
-declare function createCmssyLocaleMiddleware(config: CmssyNextConfig): (request: NextRequest) => Promise<NextResponse>;
-
-declare const CMSSY_SESSION_COOKIE = "cmssy_session";
-declare const SESSION_MAX_AGE_SECONDS: number;
-declare function sealSession(payload: CmssySessionPayload, secret: string, audience?: string): Promise<string>;
-declare function openSession(token: string, secret: string, audience?: string): Promise<CmssySessionPayload | null>;
-declare function isAccessExpired(payload: CmssySessionPayload, now?: number): boolean;
-declare function sessionCookieOptions(): SessionCookieOptions;
-
-interface CmssyAuthRouteHandlers {
-    POST(request: Request, context: {
-        params: Promise<{
-            action: string;
-        }>;
-    }): Promise<Response>;
-    GET(request: Request, context: {
-        params: Promise<{
-            action: string;
-        }>;
-    }): Promise<Response>;
-}
-declare function createCmssyAuthRoute(config: CmssyNextConfig): CmssyAuthRouteHandlers;
-
-declare const CMSSY_CART_COOKIE = "cmssy_cart";
-interface CmssyCartRouteHandlers {
-    POST(request: Request, context: {
-        params: Promise<{
-            action: string;
-        }>;
-    }): Promise<Response>;
-}
-declare function createCmssyCartRoute(config: CmssyNextConfig): CmssyCartRouteHandlers;
-
-declare function getCmssyUser(config: CmssyNextConfig): Promise<CmssySessionUser | null>;
-declare function getCmssyAccessToken(config: CmssyNextConfig): Promise<string | null>;
-
-type CmssyAuthMiddleware = (request: NextRequest) => Promise<NextResponse>;
-declare function createCmssyAuthMiddleware(config: CmssyNextConfig): CmssyAuthMiddleware;
-
-declare function fetchProducts(config: CmssyNextConfig, options: FetchProductsOptions): Promise<CmssyProductPage>;
-declare function fetchProduct(config: CmssyNextConfig, options: FetchProductOptions): Promise<CmssyProduct | null>;
-
-declare function fetchOrderByToken(config: CmssyNextConfig, options: FetchOrderByTokenOptions): Promise<CmssyOrder>;
-
-interface CmssyOrdersRouteHandlers {
-    GET(request: Request): Promise<Response>;
-}
-declare function createCmssyOrdersRoute(config: CmssyNextConfig): CmssyOrdersRouteHandlers;
-
-/**
- * Verify + parse an inbound cmssy webhook (CMS-693 / CMS-694).
- *
- * cmssy signs each delivery with HMAC-SHA256 over `${timestamp}.${body}`
- * and sends the result in the `X-Cmssy-Signature: t=<ms>,v1=<hex>`
- * header, plus a unique `X-Cmssy-Webhook-Id`. This helper recomputes the
- * signature (timing-safe compare), rejects stale timestamps to bound
- * replay, and returns the typed event.
- *
- * IMPORTANT: pass the RAW request body string (e.g. `await req.text()`),
- * never a re-serialized object - the signed bytes must match exactly.
- */
-declare class CmssyWebhookError extends Error {
-    constructor(message: string);
-}
-/**
- * Verify the signature + freshness and return the parsed event. Throws
- * `CmssyWebhookError` on any failure (missing/malformed header, bad
- * signature, stale timestamp, invalid JSON) - catch it and respond 400.
- */
-declare function verifyCmssyWebhook(options: VerifyCmssyWebhookOptions): CmssyWebhookEvent;
-
-export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_EDIT_PATH_PREFIX, CMSSY_EDIT_QUERY_PARAM, CMSSY_LOCALE_HEADER, CMSSY_SECRET_QUERY_PARAM, CMSSY_SESSION_COOKIE, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySitemapContext, CmssyWebhookError, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, buildCmssyMetadata, cmssyCspHeaders, cmssyEditRewrite, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyEditMiddleware, createCmssyEditPage, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchOrderByToken, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { CMSSY_EDIT_HEADER, CMSSY_EDIT_QUERY_PARAM, CMSSY_LOCALE_HEADER, CMSSY_SECRET_QUERY_PARAM, CMSSY_SESSION_COOKIE, CmssyAuthConfig, CmssyConfig, CmssyEnvConfig, CmssyPageData, CmssyPageMeta, CmssyPageSummary, DEFAULT_CMSSY_EDITOR_ORIGINS, assertAuthConfig, defineCmssyConfig, resolveEditorOrigin } from '@cmssy/core';
+export { C as CmssyEditorProps, a as CreateCmssyPageOptions } from './index-D-mfavEO.cjs';
+import 'react/jsx-runtime';
+import 'react';
+import '@cmssy/react';
+import '@cmssy/react/client';

package/dist/index.d.ts

@@ -1,330 +1,6 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ComponentType, ReactNode } from 'react';
-import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig } from '@cmssy/react';
-export { DEFAULT_CMSSY_API_URL, FieldCondition, FieldConditionGroup, FieldConditionLogic, evaluateFieldConditionGroup, resolveApiUrl } from '@cmssy/react';
-import { EditBridgeConfig } from '@cmssy/react/client';
-import { C as CmssyNextConfig } from './config-DNaPqq1f.js';
-export { a as CmssyEnvConfig, D as DEFAULT_CMSSY_EDITOR_ORIGINS, b as assertAuthConfig, d as defineCmssyConfig, r as resolveEditorOrigin } from './config-DNaPqq1f.js';
-import { NextRequest, NextResponse } from 'next/server';
-import { MetadataRoute, Metadata } from 'next';
-import { CmssySessionPayload, SessionCookieOptions, CmssySessionUser, FetchProductOptions, CmssyProduct, FetchProductsOptions, CmssyProductPage, FetchOrderByTokenOptions, CmssyOrder, VerifyCmssyWebhookOptions, CmssyWebhookEvent } from '@cmssy/types';
-export { CmssyAuthConfig, CmssyProductPage, CmssySessionPayload, CmssySessionUser, CmssyStockState, CmssyWebhookEvent, CmssyWebhookOrder, FetchOrderByTokenOptions, FetchProductOptions, FetchProductsOptions, MyOrdersResult, SessionCookieOptions, VerifyCmssyWebhookOptions } from '@cmssy/types';
-
-interface CmssyEditorProps {
-    page: CmssyPageData;
-    locale: string;
-    defaultLocale: string;
-    enabledLocales?: string[];
-    edit: EditBridgeConfig;
-    forms?: Record<string, CmssyFormDefinition>;
-}
-interface CreateCmssyPageOptions {
-    editor?: ComponentType<CmssyEditorProps>;
-    path?: string;
-}
-interface CatchAllParams {
-    path?: string[];
-}
-type SearchParams = Record<string, string | string[] | undefined>;
-interface CatchAllProps {
-    params?: Promise<CatchAllParams>;
-    searchParams?: Promise<SearchParams>;
-}
-/**
- * Public catch-all page. Statically renderable: it never reads
- * `searchParams` or `headers()` - awaiting either forces every route
- * dynamic and kills ISR (CMS-952). Draft-mode preview (the authenticated
- * /api/draft cookie) still works per-request via `draftMode()`, which is
- * static-safe, and renders draft CONTENT without the editor (CMS-948).
- * The editor-iframe flow (`?cmssyEdit=1&cmssySecret=...`) is served by
- * the middleware rewrite (`cmssyEditRewrite`) onto the dynamic edit route
- * mounted with `createCmssyEditPage`.
- */
-declare function createCmssyPage(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyPageOptions): ({ params, searchParams, }: CatchAllProps) => Promise<react_jsx_runtime.JSX.Element>;
-/**
- * Editor page for the middleware-rewritten edit route
- * (`app/cmssy-edit/[[...path]]/page.tsx`, `dynamic = "force-dynamic"`).
- * Re-verifies the `cmssyEdit` + `cmssySecret` pair itself, so a direct hit
- * on the route path (bypassing the middleware) cannot mount the editor.
- */
-declare function createCmssyEditPage(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyPageOptions): ({ params, searchParams, }: CatchAllProps) => Promise<react_jsx_runtime.JSX.Element>;
-
-/**
- * Where the middleware rewrites editor-preview traffic. Mount the matching
- * dynamic route in the consumer app:
- *
- *   app/cmssy-edit/[[...path]]/page.tsx
- *     export const dynamic = "force-dynamic";
- *     export default createCmssyEditPage(cmssy, blocks, { editor: Editor });
- */
-declare const CMSSY_EDIT_PATH_PREFIX = "/cmssy-edit";
-/**
- * Rewrite VERIFIED editor requests (`cmssyEdit=1` + a `cmssySecret` matching
- * the site's draft secret, CMS-948) onto the dedicated dynamic edit route, so
- * the public catch-all can stay fully static. A static page never sees its
- * query string - this rewrite is what makes the editor iframe work at all
- * once ISR is on. Draft-mode preview (the authenticated /api/draft cookie) is
- * NOT rewritten: it renders draft content on the public route via
- * `draftMode()`, without the editor. Returns null for normal traffic so it
- * composes with other middleware.
- */
-declare function cmssyEditRewrite(request: NextRequest, config: {
-    draftSecret: string;
-}, options?: {
-    /**
-     * Headers to forward to the edit route, for a site whose middleware tells
-     * the app something the path alone does not - a resolved locale, say.
-     * Without them the editor preview renders in the default language while the
-     * public page renders in the visitor's.
-     */
-    requestHeaders?: Headers;
-}): Promise<NextResponse | null>;
-/** Standalone middleware when the consumer has no other middleware to compose. */
-declare function createCmssyEditMiddleware(config: {
-    draftSecret: string;
-}): (request: NextRequest) => Promise<NextResponse>;
-
-interface CreateCmssyNotFoundOptions {
-    /**
-     * Rendered when no 404 page is configured in Settings, or the configured
-     * page has no published content. Defaults to a minimal built-in message.
-     */
-    fallback?: ReactNode;
-}
-/**
- * Renders the workspace's configured 404 page (Settings → 404 page) as the
- * body of Next's `app/not-found.tsx`, preserving the HTTP 404 status. Drop the
- * returned component in as the default export of `app/not-found.tsx`:
- *
- *   export default createCmssyNotFound(cmssy, blocks);
- */
-declare function createCmssyNotFound(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyNotFoundOptions): () => Promise<string | number | bigint | boolean | react_jsx_runtime.JSX.Element | Iterable<ReactNode> | null | undefined>;
-
-interface SeoBaseUrlOption {
-    /**
-     * Override for the canonical origin. A string (e.g. https://cmssy.com) or a
-     * resolver. Falls back to `config.siteUrl`, then the request `host` header.
-     */
-    baseUrl?: string | (() => string | Promise<string>);
-}
-
-interface CreateCmssyRobotsOptions extends SeoBaseUrlOption {
-    /** Path prefixes to disallow. Defaults to `["/api/"]`. */
-    disallow?: string[];
-    /** Override the generated rules entirely. */
-    rules?: MetadataRoute.Robots["rules"];
-    /** Reference `${baseUrl}/sitemap.xml`. Defaults to true. */
-    sitemap?: boolean;
-    /**
-     * Emit the non-standard `Host:` directive (a Yandex extension). Google
-     * ignores it and reports a warning in Search Console, so it is off by
-     * default. Enable only when targeting Yandex.
-     */
-    host?: boolean;
-}
-/**
- * Builds the default export for Next's `app/robots.ts`. Allows crawling and
- * points to the sitemap. Drop in as:
- *
- *   export default createCmssyRobots(cmssy);
- */
-declare function createCmssyRobots(config: CmssyNextConfig, options?: CreateCmssyRobotsOptions): () => Promise<MetadataRoute.Robots>;
-
-/** What an `extra` resolver needs to build URLs that agree with the page ones. */
-interface CmssySitemapContext {
-    baseUrl: string;
-    defaultLocale: string;
-    locales: string[];
-}
-interface CreateCmssySitemapOptions extends SeoBaseUrlOption {
-    /**
-     * Entries appended to the generated page list - the URLs a workspace's PAGES
-     * cannot express, like a product or a category rendered from model records.
-     * Pass a resolver to build them at request time; it gets the same baseUrl and
-     * locales the page entries use, so the two cannot disagree.
-     */
-    extra?: MetadataRoute.Sitemap | ((context: CmssySitemapContext) => MetadataRoute.Sitemap | Promise<MetadataRoute.Sitemap>);
-    /**
-     * Additional page slugs to omit. The workspace's configured 404 page
-     * (Settings → 404 page) is excluded automatically via its id, so this is
-     * only for extra slugs you never want indexed.
-     */
-    excludeSlugs?: string[];
-}
-/**
- * Builds the default export for Next's `app/sitemap.ts` from the workspace's
- * published pages. Emits one entry per page with per-locale `alternates` when
- * the config enables multiple locales. Drop in as:
- *
- *   export default createCmssySitemap(cmssy);
- */
-declare function createCmssySitemap(config: CmssyNextConfig, options?: CreateCmssySitemapOptions): () => Promise<MetadataRoute.Sitemap>;
-
-interface BuildCmssyMetadataOptions extends SeoBaseUrlOption {
-    /** Override the Open Graph / Twitter image (defaults to workspace branding). */
-    image?: string;
-    /** Open Graph type. Defaults to "website". */
-    ogType?: string;
-    /** Twitter card. Defaults to "summary_large_image" when an image exists. */
-    twitterCard?: "summary" | "summary_large_image";
-    /**
-     * The language to render metadata in. Only needed when the language does not
-     * live in the URL (a per-domain or cookie strategy); with a locale prefix the
-     * path already says it.
-     */
-    locale?: string;
-}
-/**
- * Builds complete Next.js `Metadata` for a cmssy page from its SEO fields and
- * the workspace branding: title/description/keywords, canonical + per-locale
- * `hreflang` alternates, and Open Graph / Twitter cards (with the branding OG
- * image). Use in a route's `generateMetadata`:
- *
- *   export const generateMetadata = async ({ params }) =>
- *     buildCmssyMetadata(cmssy, (await params).path);
- *
- * Pass the catch-all segments **as routed**, locale prefix and all: the prefix
- * is what says which language this page is. Stripping it first (and leaving the
- * language to `config.resolveLocale`) is how every localized page ends up with
- * the default language's title - and a canonical pointing at the default
- * language's URL, which tells Google the translation is a duplicate.
- */
-declare function buildCmssyMetadata(config: CmssyNextConfig, path?: string | string[], options?: BuildCmssyMetadataOptions): Promise<Metadata>;
-
-type CmssyDraftRouteConfig = Pick<CmssyNextConfig, "draftSecret"> & {
-    defaultRedirect?: string;
-};
-declare function createDraftRoute(config: CmssyDraftRouteConfig): (request: Request) => Promise<Response>;
-
-interface CmssyCspOptions {
-    /** Defaults to the cmssy cloud admin origin when unset. */
-    editorOrigin?: string | string[];
-}
-interface MutableHeaders {
-    headers: {
-        get: (name: string) => string | null;
-        set: (name: string, value: string) => void;
-        delete: (name: string) => void;
-    };
-}
-declare function cmssyCspHeaders(options: CmssyCspOptions): Record<string, string>;
-declare function applyCmssyCsp<T extends MutableHeaders>(response: T, options: CmssyCspOptions): T;
-
-declare const CMSSY_EDIT_HEADER = "x-cmssy-edit";
-declare const CMSSY_EDIT_QUERY_PARAM = "cmssyEdit";
-declare const CMSSY_SECRET_QUERY_PARAM = "cmssySecret";
-interface EditRequestLike {
-    cookies: {
-        has: (name: string) => boolean;
-    };
-    nextUrl: {
-        searchParams: {
-            getAll: (name: string) => string[];
-            get: (name: string) => string | null;
-        };
-    };
-}
-declare function isCmssyEditRequest(request: EditRequestLike, config: {
-    draftSecret: string;
-}): Promise<boolean>;
-declare function isCmssyEditMode(): Promise<boolean>;
-
-declare const CMSSY_LOCALE_HEADER = "x-cmssy-locale";
-declare function localeForPathname(config: CmssyClientConfig, pathname: string): Promise<string>;
-declare function splitCmssyLocale(config: CmssyClientConfig, path: string[] | undefined): Promise<{
-    locale: string;
-    path: string[] | undefined;
-}>;
-/**
- * Resolve the active locale. Pass `options.path` (route params) wherever
- * possible - that path is static-safe. The no-argument form falls back to the
- * `x-cmssy-locale` request header, which reads `headers()` and forces the
- * calling route into dynamic rendering.
- */
-declare function getCmssyLocale(config: CmssyClientConfig, options?: {
-    path?: string | string[];
-}): Promise<string>;
-
-/**
- * Resolves the active locale from a pathname's leading segment. Uses the
- * config's static `defaultLocale` + `enabledLocales` when both are set (no
- * network); otherwise fetches the workspace locales (cached).
- */
-declare function resolveLocaleFromPathname(config: CmssyNextConfig, pathname: string): Promise<string>;
-/**
- * Middleware that derives the locale from the URL path prefix and forwards it as
- * the `x-cmssy-locale` request header, so server components that can't read the
- * path (root layout) resolve the right locale via `getCmssyLocale`.
- */
-declare function createCmssyLocaleMiddleware(config: CmssyNextConfig): (request: NextRequest) => Promise<NextResponse>;
-
-declare const CMSSY_SESSION_COOKIE = "cmssy_session";
-declare const SESSION_MAX_AGE_SECONDS: number;
-declare function sealSession(payload: CmssySessionPayload, secret: string, audience?: string): Promise<string>;
-declare function openSession(token: string, secret: string, audience?: string): Promise<CmssySessionPayload | null>;
-declare function isAccessExpired(payload: CmssySessionPayload, now?: number): boolean;
-declare function sessionCookieOptions(): SessionCookieOptions;
-
-interface CmssyAuthRouteHandlers {
-    POST(request: Request, context: {
-        params: Promise<{
-            action: string;
-        }>;
-    }): Promise<Response>;
-    GET(request: Request, context: {
-        params: Promise<{
-            action: string;
-        }>;
-    }): Promise<Response>;
-}
-declare function createCmssyAuthRoute(config: CmssyNextConfig): CmssyAuthRouteHandlers;
-
-declare const CMSSY_CART_COOKIE = "cmssy_cart";
-interface CmssyCartRouteHandlers {
-    POST(request: Request, context: {
-        params: Promise<{
-            action: string;
-        }>;
-    }): Promise<Response>;
-}
-declare function createCmssyCartRoute(config: CmssyNextConfig): CmssyCartRouteHandlers;
-
-declare function getCmssyUser(config: CmssyNextConfig): Promise<CmssySessionUser | null>;
-declare function getCmssyAccessToken(config: CmssyNextConfig): Promise<string | null>;
-
-type CmssyAuthMiddleware = (request: NextRequest) => Promise<NextResponse>;
-declare function createCmssyAuthMiddleware(config: CmssyNextConfig): CmssyAuthMiddleware;
-
-declare function fetchProducts(config: CmssyNextConfig, options: FetchProductsOptions): Promise<CmssyProductPage>;
-declare function fetchProduct(config: CmssyNextConfig, options: FetchProductOptions): Promise<CmssyProduct | null>;
-
-declare function fetchOrderByToken(config: CmssyNextConfig, options: FetchOrderByTokenOptions): Promise<CmssyOrder>;
-
-interface CmssyOrdersRouteHandlers {
-    GET(request: Request): Promise<Response>;
-}
-declare function createCmssyOrdersRoute(config: CmssyNextConfig): CmssyOrdersRouteHandlers;
-
-/**
- * Verify + parse an inbound cmssy webhook (CMS-693 / CMS-694).
- *
- * cmssy signs each delivery with HMAC-SHA256 over `${timestamp}.${body}`
- * and sends the result in the `X-Cmssy-Signature: t=<ms>,v1=<hex>`
- * header, plus a unique `X-Cmssy-Webhook-Id`. This helper recomputes the
- * signature (timing-safe compare), rejects stale timestamps to bound
- * replay, and returns the typed event.
- *
- * IMPORTANT: pass the RAW request body string (e.g. `await req.text()`),
- * never a re-serialized object - the signed bytes must match exactly.
- */
-declare class CmssyWebhookError extends Error {
-    constructor(message: string);
-}
-/**
- * Verify the signature + freshness and return the parsed event. Throws
- * `CmssyWebhookError` on any failure (missing/malformed header, bad
- * signature, stale timestamp, invalid JSON) - catch it and respond 400.
- */
-declare function verifyCmssyWebhook(options: VerifyCmssyWebhookOptions): CmssyWebhookEvent;
-
-export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_EDIT_PATH_PREFIX, CMSSY_EDIT_QUERY_PARAM, CMSSY_LOCALE_HEADER, CMSSY_SECRET_QUERY_PARAM, CMSSY_SESSION_COOKIE, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySitemapContext, CmssyWebhookError, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, buildCmssyMetadata, cmssyCspHeaders, cmssyEditRewrite, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyEditMiddleware, createCmssyEditPage, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchOrderByToken, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { CMSSY_EDIT_HEADER, CMSSY_EDIT_QUERY_PARAM, CMSSY_LOCALE_HEADER, CMSSY_SECRET_QUERY_PARAM, CMSSY_SESSION_COOKIE, CmssyAuthConfig, CmssyConfig, CmssyEnvConfig, CmssyPageData, CmssyPageMeta, CmssyPageSummary, DEFAULT_CMSSY_EDITOR_ORIGINS, assertAuthConfig, defineCmssyConfig, resolveEditorOrigin } from '@cmssy/core';
+export { C as CmssyEditorProps, a as CreateCmssyPageOptions } from './index-D-mfavEO.js';
+import 'react/jsx-runtime';
+import 'react';
+import '@cmssy/react';
+import '@cmssy/react/client';